It seems like the antivirus had some redirections in DNS addresses or even a Hosts file, all meant to take a look at incoming/outgoing traffic to "protect" you from viruses and various nefarious menaces. Scare tactics work well.
Anyway, Johan, what could he do? I doubt a registry cleaner would solve everything for him. Maybe showing us his network settings? We could find something that way...